Filter
Top Products
11-4
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 11 Configuring Security Manager Administrative Settings
CS-MARS Page
Field Reference
CS-MARS Page
Use the CS-MARS page to register the Cisco Security Monitoring, Analysis and Response System
servers that are monitoring your devices with Security Manager. By registering your CS-MARS servers,
you can view messages and events captured in CS-MARS based on a device’s firewall access rules or
IPS signature rules configured in Security Manager. You must register a CS-MARS server before users
can see events collected from it.
Tip If you are using CS-MARS global controllers, add them instead of the individual local controllers. By
adding global controllers, Security Manager can identify the correct local controller for a device
automatically, without you having to add each of the local controllers. This simplifies your CS-MARS
configuration in Security Manager.
Navigation Path
Select Tools > Security Manager Administration and select CS-MARS from the table of contents.
Table 11-3 Configuration Archive Page
Element Description
Max. Versions per Device
Purge Now button
Enable Configuration
Archive Versions Auto Purge
The number of configuration versions you want to retain for each
managed device, from 1 to 100. If you reduce the number, you can click
Purge Now to immediately delete extra versions.
Security Manager automatically deletes extra versions during its
normal cleanup cycle if you select the Enable Configuration Archive
Versions Auto Purge option.
TFTP Server for Rollback The fully-qualified DNS hostname or IP address of the server to use for
TFTP file transfers. TFTP is used during rollback for IOS devices when
the configuration cannot be updated using the configure replace
command, which does not force a system reload. Enter localhost to use
the Security Manager server.
By default, a TFTP server is enabled on the Security Manager server. If
you specify a remote TFTP server, you must configure that server
appropriately to provide TFTP services.
TFTP Root Directory The root directory for configuration file transfers if you are using the
Security Manager server as the TFTP server. Click Browse to select a
directory on the Security Manager server.
If you specify a server other than the Security Manager server as the
TFTP host, Security Manager always uses the root directory of that
TFTP server. You cannot specify a non-root directory for remote TFTP
servers.
Save button Saves and applies changes.
Reset button Resets changes to the last saved values.
Restore Defaults button Resets values to Security Manager defaults.